CVE-2022-49455

misc: ocxl: fix possible double free in ocxl_file_register_afu

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

misc: ocxl: fix possible double free in ocxl_file_register_afu

info_release() will be called in device_unregister() when info->dev's

reference count is 0. So there is no need to call ocxl_afu_put() and

kfree() again.

Fix this by adding free_minor() and return to err_unregister error path.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.0th percentile
Published
2025-02-26T02:13Z
EPSS history
Timeline
  • 26 FEB 02:13Z
    misc: ocxl: fix possible double free in ocxl_file_register_afu
    cvelistv5